$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/337f32bf-311d-364b-80ef-fcaa89e97268.roa File: 337f32bf-311d-364b-80ef-fcaa89e97268.roa (raw, json) Hash identifier: Ptw+uWIlQAPZC7gm7m2NW8v+IG7IsHWLWnmcXoAnhyw= Subject key identifier: F6:4F:A9:D6:B2:CF:80:F4:A5:0F:CB:95:F2:6A:76:95:44:C9:22:28 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE405507E57EFC847B630380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/337f32bf-311d-364b-80ef-fcaa89e97268.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 71.30.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:55:07:e5:7e:fc:84:7b:63:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=f736809e-35cb-49e8-89bd-2c12913dec4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:64:0f:25:67:1f:34:a7:4c:7b:6b:5a:1f:4e: de:22:6c:1e:17:77:d3:e5:81:5e:e5:6c:31:47:1f: 35:59:c0:5e:8a:86:34:3a:78:f2:a1:05:5c:c4:97: 4d:cb:22:8c:ee:82:bb:9d:d1:0e:44:82:0d:69:a0: fb:f2:76:25:23:7c:c3:71:b8:23:66:15:da:44:ae: aa:1e:c7:27:10:b9:e9:3b:dd:46:a9:f5:df:dc:e1: 7d:43:93:5e:67:93:6e:e7:85:ff:d4:e7:b4:15:f4: a5:0c:e5:04:94:4b:06:84:30:af:58:7b:9b:1e:eb: 4d:f1:4b:01:3a:7f:1b:75:5b:31:b2:4c:ad:db:f4: f0:bf:8d:64:05:cf:be:5a:e4:c2:0d:d0:29:76:88: e1:52:59:00:1f:70:07:24:ed:8a:95:66:d0:7b:48: ad:62:7a:82:d5:d3:cb:52:d0:f1:fe:77:3b:46:19: 0d:e6:11:12:ce:35:2f:0a:1a:60:b4:61:1c:4b:5a: 1e:c1:d0:a2:96:9c:72:0e:9b:57:05:4d:9a:de:49: 2a:62:9c:79:87:c6:28:4f:11:d2:50:71:48:3f:a0: 53:c6:bd:c9:a0:e7:8d:5f:a4:38:e8:c3:04:0f:b4: e8:f9:32:29:c2:29:fb:e3:89:bc:07:9a:c4:32:d9: c9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:4F:A9:D6:B2:CF:80:F4:A5:0F:CB:95:F2:6A:76:95:44:C9:22:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/337f32bf-311d-364b-80ef-fcaa89e97268.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:ee:87:5c:de:79:7f:a8:1e:c6:0b:ad:16:d7:fc:84:af:c4: 1f:b1:07:a9:ad:0a:9a:59:5c:8a:28:a1:47:03:30:76:be:aa: 6a:56:39:58:14:3b:71:14:fa:56:20:f4:57:9e:a9:db:4b:53: 83:93:0b:ea:56:d5:4e:5d:0c:c4:d7:cb:9d:c8:19:61:55:7e: bf:4a:c0:db:c1:50:5b:e1:a9:92:37:03:3f:fb:17:15:4f:fb: 33:b3:fe:49:7f:8b:4a:0f:69:96:72:bc:8b:b8:fb:1b:52:51: ef:9b:51:1d:63:d6:19:61:5b:3d:a5:2d:53:36:af:6f:0b:e9: f9:b8:66:2c:a6:30:b3:50:64:e5:93:de:b7:df:11:d1:39:bb: f8:f3:fb:61:e5:e1:39:c7:eb:18:d0:f6:04:62:f3:9c:da:d7: 71:5e:c1:20:a3:70:b4:3b:f9:46:ed:07:50:80:9b:d8:e6:ba: 96:46:6e:91:ce:b3:be:bc:08:ee:54:fa:15:4b:d6:c5:3e:6e: bb:65:02:31:ba:44:bb:c0:1b:d2:03:4c:81:8d:76:95:9f:2e: d0:f1:9e:37:3f:05:91:ac:da:3e:5a:0f:88:db:6e:bc:df:07: 0c:d5:e5:3d:0c:d9:90:36:2a:5d:8f:c6:c2:18:b6:5e:ce:87: 52:dd:75:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QFUH5X78hHtjA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZjczNjgwOWUtMzVjYi00OWU4LTg5YmQtMmMxMjkxM2RlYzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWQPJWcfNKdMe2taH07eImweF3fT5YFe5Wwx Rx81WcBeioY0OnjyoQVcxJdNyyKM7oK7ndEORIINaaD78nYlI3zDcbgjZhXaRK6q HscnELnpO91GqfXf3OF9Q5NeZ5Nu54X/1Oe0FfSlDOUElEsGhDCvWHubHutN8UsB On8bdVsxskyt2/Twv41kBc++WuTCDdApdojhUlkAH3AHJO2KlWbQe0itYnqC1dPL UtDx/nc7RhkN5hESzjUvChpgtGEcS1oewdCilpxyDptXBU2a3kkqYpx5h8YoTxHS UHFIP6BTxr3JoOeNX6Q46MMED7To+TIpwin744m8B5rEMtnJZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZPqdayz4D0pQ/LlfJqdpVEySIoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzM3ZjMyYmYtMzExZC0z NjRiLTgwZWYtZmNhYTg5ZTk3MjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx7IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIruh1zeeX+oHsYLrRbX/ISvxB+xB6mtCppZXIoooUcDMHa+qmpWOVgU O3EU+lYg9FeeqdtLU4OTC+pW1U5dDMTXy53IGWFVfr9KwNvBUFvhqZI3Az/7FxVP +zOz/kl/i0oPaZZyvIu4+xtSUe+bUR1j1hlhWz2lLVM2r28L6fm4ZiymMLNQZOWT 3rffEdE5u/jz+2Hl4TnH6xjQ9gRi85za13FewSCjcLQ7+UbtB1CAm9jmupZGbpHO s768CO5U+hVL1sU+brtlAjG6RLvAG9IDTIGNdpWfLtDxnjc/BZGs2j5aD4jbbrzf BwzV5T0M2ZA2Kl2PxsIYtl7Oh1LddRU= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:38 2025 by rpki-client